registry / @cloop/runner / 0.3.41
@cloop/runner@0.3.41
Make your computer and your agents Cloop machines: device login, the machine daemon, the Cloop MCP server, and Claude Code hooks.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the flagged installer runs within the explicit `cloop connect` setup flow after announcing that it will install Claude Code. The reviewed download behavior serves the package’s documented purpose.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes `cloop connect` and the setup flow determines that Claude Code is needed.
Impact
Installs Claude Code for the user’s machine setup; no malicious behavior was identified.
Mechanism
The CLI announces the installation and invokes Anthropic’s installer from `claude.ai`.
AI rationale
The package has no install lifecycle hook, and the flagged installer runs within the explicit `cloop connect` setup flow after announcing that it will install Claude Code. The reviewed download behavior serves the package’s documented purpose.
Evidence
package.jsondist/index.jsdist/chunk-3XQ44U27.js
Network endpoints2
claude.ai/install.ps1claude.ai/install.sh
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI and has no install, preinstall, or postinstall lifecycle hook.
- The CLI runs the connection flow only when the user invokes `cloop connect`.
- When that flow needs Claude Code, it announces the installation and uses Anthropic’s official installer host.
Evidence against
- The install helper downloads and executes an installer script, but it is gated by the connect flow and uses `claude.ai`.
- Codex downloads use the official OpenAI GitHub releases and verify the archive against its published SHA-256 list.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/chunk-SBYSVZ7J.jsView file
84// src/presence.ts
L85: import { execFileSync as execFileSync2 } from "child_process";
L86: import { randomUUID } from "crypto";
High
Child Process
Package source references child process execution.
dist/chunk-SBYSVZ7J.jsView on unpkg · L84dist/chunk-3XQ44U27.jsView file
48windowsExecutable,
L49: windowsPowerShellEnv,
L50: writeBoxConfig
...
L107: import { basename, delimiter, dirname, join, posix, win32 } from "path";
L108: var CODEX_RELEASES = "https://github.[redacted]";
L109: var CODEX_TRIPLES = {
...
L127: var CODEX_SUMS = `${CODEX_RELEASES}/codex-package_SHA256SUMS`;
L128: function codexInstallCommand(home, platform = process.platform, arch = process.arch) {
L129: const asset = codexAsset(platform, arch);
...
L235: }
L236: function findLocalCodex(home, env = process.env) {
L237: findIn(codexBinDir(home), "codex", env);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-3XQ44U27.jsView on unpkg · L48Findings
1 Critical3 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/chunk-WIAWWXGP.js
HighChild Processdist/chunk-SBYSVZ7J.js
HighSandbox Evasion Gated Capabilitydist/chunk-3XQ44U27.js
HighRuntime Package Installdist/chunk-3XQ44U27.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @cloop/runner@0.3.41.
See all versions of @cloop/runner for other recorded verdicts.
- Review the evidence and your use of @cloop/runner@0.3.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.